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User-Defined Data Types 



list^of Jists case of y.tl 
NIL; join(cons(y.hd.car,y.lid.cdr),y.tl) 
join: join(merge(cons(y.hd.car,y.hd.cdr),hd(y.tl)), 
pair._merge(tl(y.tl)))) 
SIMPLIFIES TO: 
|- TRUE 

PROOF OF +5 RELATIVE TO THE ASSERTIONS: +7 

The sample theorems proved in this paper are typical of the theorems which 
can be proved using our verifier with a reasonable amount of programmer 
guidance. Among the theorems we have proved using our verifier are: the total 
correctness of a program implementing a unification algorithm (assuming all 
variables have been renamed), the equivalence of an iterative algorithm (using a 
stack) and a simple recursive algorithm for counting the leaves of a binary tree, 
the total correctness of an extended version (including assignment) of the 
McCarthy-Painter compiler for arithmetic expressions [McCarthy and Painter 
1967], and the total correctness of a very simple set of data base management 
functions. 

FURTHER WORK 

At the moment, we are concentrating our research efforts in two areas: 

1) Extending our verification system to handle partial functions so that we can 
prove the correctness of a simple compiler. 

2) Enlarging the class of theorems the simplifier can automatically prove, without 
jeopardizing the verifier's potential usefulness as a practical tool. 

Eventually we hope to extend TYPED LISP to include enough "impure" features 
such as assignment to make it a practical language for implementing real 
programs. 
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COWS SHOULD NOT EVALUATE ITS ARGUMENTS 

The constructor function which allocates and fills 
records in recursive, side-effect-free procedural 
languages is redefined to be a no n- 4 tfllct (Vuille- 
min 197U) elementary operation. Instead of evalu- 
ating its arguments , it builds suspensions of them 
which are not coerced until the suspension is 
accessed by a strict elementary function. The 
resulting evaluation procedures are strictly more 
powerful than existing schemes for languages such 
as LISP. The main results are that Landin ' s streams 
are subsumed Into McCarthy's LISP merely by the 
redefinition of elementary functions, that invoca- 
tions of LISP's evaluator can be minimized by re- 
defining the elementary functions without redefining 
the interpreter, and as a strong conjecture, that 
redefining the elementary functions yields the 
least fixed-point semantics for McCarthy's evalua- 
tion scheme. This new insight into the role of 
constructor functions will do much to ease the In- 
terface between recursive programmers and iterative 
programmers , as well as the interface between 
programmers and data structure designers. 

INTRODUCTION 

It is common to perceive functional evaluation as 
requiring argument evaluation to be completed be- 
fore actual functional application begins. In com- 
puter programs, however, there has been considerable 
development of delayed argument evaluation through 
schemes such as call-by-name in ALGOL 60. Probably 
because of obsession with arithmetic examples, 
which are strict (that is, require all arguments in 
evaluated form), it has been commonly assumed that 
all elementary functions were strict. During the 
course of a project on compilation of pure recursive 
LISP 1.0 (McCarthy et al . 1962) source code into 
iterative object code, we have uncovered a critical 
class of elementary functions which probably should 
never be treated as strict: the functions which 
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allocate or construct data structures. 

We use the term com to refer to this class of 
functions and later to refer to a particular func- 
tion which allocates records of two fields. The 
term is common to several list processing languages 
(McCarthy et al . 1962; Burstall, Collins, and 
Popplestone 1971) which require that the arguments 
to com fix the values of the fields in the new 
record. This requirement is essential to our analy- 
sis because we assume a s i de - e f f ect - f r e e evaluation 
scheme in order to guarantee the integrity of envi- 
ronments which are passed subliminally about the 
system. 

It is our thesis that the fields of a newly allo- 
cated record can be filled with a structure repre- 
senting the suspended evaluation of the respective 
argument, instead of the value of that argument, as 
is done on systems with strict implementation of 
com. If all other elementary functions are able 
to detect these suspensions and to force evaluation 
only at the time that the value is genuinely criti- 
cal to the course of the computation (necessary to 
the value of the main function), then the results 
are the same as those of a strict evaluation scheme 
whenever both converge. Convergence is more likely 
in the new scheme since potentially divergent yet 
immaterial argument evaluation can be avoided. In 
programming terms the scheme allows exponential im- 
provement in run times at the cost of linear degra- 
dation of the elementary system functions' times 
and of space overhead in dragging around environ- 
ments. We are interested in the insights provided 
for the recurs Ion- compiler problem because the role 
of constructors Is critical in the definition of 
the source language. 

Hoare (1975) has discussed the role of com in 
building recursive data structures. The power of 
these structures is welcome because our restriction 
to purely recursive programs allows us no other 
kind. The language model we shall use is McCarthy's 
LISP, known in its basic form as LISP 1.0 or pure 
LISP. We owe a great deal to his definition and 
description of the language in terms of its own 
structures using only five elementary functions. 
The major results of this paper, in effect, have 
been implemented on his system with dramatic 
effects on his semantics resulting from simply 
changing three of these five functions. 

Landin approached the non-strict implementation 
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of com in his discussion of streams (Landin 1965). 
He describes three elementary functions which accom- 
plish a com strict in only one of its two parameters 
This version is satisfactory when the recursion 
pattern is peculiarly linear and when semantic 
improvements available from these structures 
within the interpreter can be ignored. 

The remainder of this paper is divided Into five 
sections followed by conclusions. Section I is a 
brief Introduction to LISP notation as interpreted 
in this paper. Section II presents definitions of 
the five elementary functions used for the defining 
language. They provide that com does not evaluate 
its arguments, but delays them in a form detectable 
and coercible by two of the other four strict ele- 
mentary functions. Results in this section are 
proofs that McCarthy's interpreter built with these 
elementary functions is properly more powerful than 
it was as originally specified, and a strong conjec- 
ture that the new interpreter, in fact, gives the 
least fixed-point semantics for LISP. Section III 
presents a practical implementation for suspensions 
which prevents repeated coercion of the same sus- 
pension. This is accomplished by storing the ulti- 
mate value back into the node which ought to have 
contained it in the original interpretation scheme, 
replacing the suspension which led to it. 
Section IV relates Landln's streams to LISP as in- 
terpreted with the new com. Streaming is shown to 
be less powerful by considering cases where evalua- 
tion should not follow a sequential pattern. An 
analogy between streams and sequential files Is ex- 
tended to an analogy between suspensions and random 
access (overlapping tree structure) files which 
suggests that file handling may be implicit in pro- 
gramming style. In Section V we consider familiar 
functions whose arguments are to be selectively 
evaluated which have hitherto been implemented in 
LISP as special forms but now are expressible as 
ordinary functions. 

I. LISP 

The five elementary functions presented by McCarthy 
will be called -can, • c&K , : co m , : cq , and --atom. 
These functions are redefined in two ways to allow 
the interpretation of com to postpone evaluation 
of its arguments. In both cases the five are sim- 
ply called can., cdft, com, cq , and atom. Our first 
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redefinition is sufficient for the theoretical 
results in Section II and even Section IV, but are 
extremely inefficient. The versions of basic func- 
tions presented in Section III yield a system of 
equivalent power, but are more efficient and these 
definitions are used In both Section IV and Section 
V . 

The notation used throughout the paper for form 
invocation is the S-expression of McCarthy. The 
invocation (f a b c) asks that the function, f, be 
applied to the arguments a, b, and c. Usually this 
means that the values of the three actual parameters 
are to be bound to the three formal parameters 
in the interpretation of the body of f , but there 
are exceptions. If f were a special form (McCarthy 
1962), then the list of the three unevaluated 
arguments would be bound to the first actual 
parameter of f. If f were defined with a nontrivial 
atom as its formal parameter list, as discussed in 
Section V, then the list of the three values associ- 
ated with the arguments would be bound to that atom. 

A L-Lht Is a sequence of zero or more atomic 
elements or lists. A list is also written using the 
parenthesis notation; whether the interpreter 
accesses it as an expression rather than as a value 
determines whether evaluation will occur. The empty 
list is denoted by the atom NIL"; the value of 
( : car z) is the first element on the list, z; the 
remainder of the list, z, exclusive of ( : car z) is 
( : cdr z); (:cons q z) gives the list which is the 
list z with the form q stuck on the front. 

A little of the record manipulation of LISP is 
needed for Section III. Atoms are references to 
distinguishable structures. The rest of the data 
structure is represented by references to records 
of two fields: the A- {,-L&ld and the V-^-L&ld. New 
nodes are available through -conis which places its 
two arguments in the A- {jA.e.td and V- fa-Lztd , respec- 
tively. The functions : ddK. and -edit extract the 
respective fields from a reference to a non-atomic 
structure. The predicate i&tom tests if its argu- 
ment Is atomic, and the predicate. '• &q tests if its 
two atomic arguments are the same . On non-atomic 
arguments : Z.q is undefined. 



^Symbol strings composed entirely of upper case 

letters are constants ; that is , they evaluate to 

themselves. LISP provides the function quote, for 
this role; only atoms may be quoted. 
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We have made a notational change in the syntax 
of conditional expressions which needs to be 
explained only to LISPers who have thus far breezed 
through this section. McCarthy's conditional form, 
cond, requires its tail to be structured as a series 
of lists of two elements which are often called 
"cond-pairs . " Rather than introduce the redundant 
extra parentheses which make the pairings explicit, 
we use the commenting keywords , £k&n, zthz^i, 
and zti £ to group and to enhance legibility. In 
the interpreter we define COnd to take its predi- 
cates and selections unpaired as one long alterna- 
ting list. The reader who wishes to interpret an 
invocation of cond literally should ignore the com- 
menting keywords. 

For example, we postulate the predicate iame. 
which is defined only in terms of : eq and '■atom, 
exclusive of the other three elementary functions 
whose semantics are altered in this paper. 

(same sexp atiti) = (cond 

■LI (:atom sexp) tkzn (:eq sexp atm) 

eXie nil) . 

This function is a convenient way of avoiding 
applications of : e.q to non-atoms In the interpreter. 
In many implementations • <2,q is a reference compara- 
tor, which is sufficient for its semantics but also 
provides unnecessary comparisons on non-atoms. 
Even in McCarthy's Appendix B interpreter dq is 
applied to (potential) non-atoms in a manner which 
we judiciously avoid with ia.mil. 

II. ALLOCATING WITH INCOMPLETE CONTENTS 

V 'z^lnl tlo n: A function Is i,th.i.at In lti> pa.tia.m- 

th 

e.t&ti If divergence of its i argument implies the 
function diverges with that argument. 
V £ ^i.ni.ti.0 II : A function is itt-Lct (Vuillemin 1974) 
if it is strict in all of Its parameters. 

A strict function may be evaluated by evaluating 
0.LL of Its arguments before its definition is 
interpreted. If it is strict in only a few' 
parameters then the corresponding arguments may be 
evaluated first . In an environment where all func- 
tions are strict, the behavior is like the call-by- 
value scheme of ALGOL 60. Vuillemin specifies that 
O.ZZ elementary (machine level) functions, except 
conditional expressions, are strict, although other 
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functions need not be. The foundation of our 
scheme is that we weaken this requirement. 

In recursive programming languages the role of 
the constructor function, here called com (McCarthy 
1963; Burstall, Collins and Popplestone 1971), is 
to allocate a new node from the available space 
pool and to fill its fields with its arguments. 
Languages with iterative control structures and 
assignment statements separate these two operations 
with sequential statements , allowing fields to be 
undefined while other operations intervene. In both 
protocols , the value returned by CO ni is a reference 
to the allocated node. 

V ziLni.t-ia n- A jjO-tm is an unevaluated expression. 
Vzi-Ln-it-LoYi- An cn\J Lftonmcnt is a function which maps 
formal parameters to their values. 

Vt^-in-Lti-OYl- A hmpcmLon is a data structure, acces- 
sible only to the interpreter of a program, which 
is composed of a form and an environment for the 
form's eventual evaluation. 

A suspension provides enough information to eval- 
uate a form whenever its value is needed. This ob- 
tains because an environment is not subject to side- 
effects which could invalidate delayed evaluation. 
Several languages like LISP and SIMULA (Dahl and 
Nygaard 1966) allow the environment to be. accessible 
as a single data structure. By hiding the environ- 
ment in a data structure inaccessible to the user, 
we avoid such a situation. The function, impend, 
takes a form and an environment as arguments and 
creates a suspension from them. The auxilliary 
selector functions, ^Otm and env , are defined over 
suspensions to return the respective fields. There 
is also a type predicate, t> ixi pended* . 

Our com allocates a fresh node from available 
space and fills the appropriate fields with a 
suspension for each argument. This specification 
makes no assumption about the number of fields 
within a node, but assumes each field must be large 
enough to hold a reference to a suspension instead 
of the eventual value of the suspension. Our 
examples will presume a node of only two fields, 



*From these definitions, iuipend, ^OHm, and env 
act very much like -com, •' CdK and-'cd-t. The dif- 
ference is that the nodes created by impend and 
■■COni are disjoint and clearly distinguished by 
i Uipended whose domain is the set of references 
within the system. 
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which is a model sufficient to represent a node of 
any size through the "naturally corresponding" list 
structure described for trees by Knuth (1975). This 
convention of suspending arguments for coni allows 
it to be non-strict yet never allows the contents of 
an allocated node to be undefined. The value re- 
turned by coni, as in the earlier protocols, is a 
reference to the newly allocated node. 

First Redefinition of the Primitives 

We present a re interpretation of the elementary 
functions for LISP. The elementary predicates, at 
least, will not be confused because 

( eq q r ) E ( :eq q r ) 

and 

( atom q ) = ( : atom q ) . 

Coni is a Special form (McCarthy 1962) which takes 
two arguments that become a single list of two 
forms bound to its first formal parameter. Whatever 
environment exists at the time of invocation of 
com is bound to the second formal parameter. We 
define com through i CO ni : 

(scons arg env) = 

(:cons (suspend (rear args ) env) 

(suspend ( : car (:cdr args)) env)) . 

The selectors, can and cdfl always assume their argu- 
ment Is a reference to a node allocated by : CO m , 
and never yield a suspension as a result. 

(car q) E (eval (form ( : car q))(env (:car q))); 

(cdr q) - (eval (form ( : cdr q))(env ( : cdr q))). 
If the evaluation process traverses other suspen- 
sions, those other suspensions are only encountered 
within ca.fi and cdfi so evaluation continues. Eval- 
uation within those two functions, called coercion, 
terminates when an atom or an application of com 
is encountered . 

Obienvatlon 1 : The structures built with iconi 
have the property that the nodes allocated by -com 
only contain references to nodes allocated by im- 
pend, and that the nodes allocated by impend con- 
tain only references to nodes allocated by •■com or 
to atoms . 

The evaluation scheme specified appears to be 
the same as the usual call-by-value protocol similar 
to that of ALGOL 60. There Is a very significant 
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difference: not in whtn cv aluatlo n occun.i, but 

In how &an. evaluation pn.oce.ndt> . When call-by-name 
forces evaluation on an actual use of a formal param- 
eter, it forces a complete evaluation because the 
ALGOL 60 model presumes that all elementary func- 
tions are strict, at least, in one parameter. In 
our LISP model with suspensions, COM is not strict 
in any argument, so evaluation stops at the first- 
application of coni. As a result, the coercing of 
a suspension "bottoms out" much sooner than the 
forced evaluation of a similar parameter called-by- 
name . For example, if f, g, and h are functions and 
x, y, and z are arguments to these functions, then 
evaluation of 

(car (cons (cons (f x)(g y)) (h z))) 

does not cause evaluation of either (f x), (g y), or 
(h z). It returns a reference to 

( cons (fx) ( g y ) ) 

after performing two storage allocations with '-coni 
and constructing four suspensions with iuiptnd. In 
the evaluation of 

(car (cons (f x) (cons (g y) (h z)))) 

the form 

( cons ( g y ) (h z ) ) 

is converted into a suspension instead of being 
evaluated, and since that suspension is not acces- 
sible to any permanent environment it will never be 
coerced. It, like the suspension for (h z) in the 
former example, is lost to the system garbage col- 
lector . 

We postulate a LISP evaluator for the side- 
effect-free language known as LISP 1.0 (McCarthy 
1962, Chapter one). The appendix presents an in- 
terpreter patterned after McCarthy's. The tvall 
apply interpreter is the same Interpreter using 
McCarthy's elementary functions. 

We present an example below which does not 
really fit th.e language LISP 1.0 because It uses, the 
data structure "number" and arithmetic. We use the 
example in later proofs about the cval/apply LISP 
1.0 system which depend on order of evaluation 
rather than on the properties of arithmetic. We 
choose to violate the data type of LISP 1.0 in order 
to present an example of a function which generates 
a familiar infinite sequence. All arithmetic 
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functions are strict. 

Example.: The infinite sequence ~, i 77,... i„ .... 

1 <+ 9 n 

can be expressed by (terms 1) where 

(terms n) E ( cons (reciprocal( square n)) 
( terms ( addl n ) ) ) . 

This sequence has partial sums which converge to 
tt 2 /6, but that property is not critical to the 
following discussion. The important fact is that 
evaluation of (terms n) does not immediately diverge 
it results In a node referencing two suspensions. 
The interpretation of this value may, nevertheless, 
reflect its divergent behavior. An attempt 
to print it would diverge because the print routine 
traverses list structures using strict elementary 
functions in order to find printable atomic ele- 
ments. Other uses of (terms 1) do not reflect its 
potential divergence. For instance, extracting the 
third term in the sequence can be accomplished by 
the form 

(car (cdr ( cdr (terms 1)))). 

The value 1/9 results from the construction of six 
suspensions during the allocation of three nodes , 
and n.zci.pn.0 cal and Aquatic are invoked only once 
during the coercion of one of those six suspensions. 

First Results 

The first results establish that McCarthy's LISP 
1.0 interpreter, here called •• &val/ : apply , is 
strictly less powerful than the same interpreter, 
called cval/apply, which interprets can, cdn., and 
coni as described above. The prototype interpreter, 
presented In the appendix, forms the basis for this 
argument under two interpretations: : cval/ : apply 
is obtained by substituting : can. , : cdn. , and '-iconi 
for all instances of can., cdn., and iconi, in the 
cval/apply interpreter. We shall refer to a para- 
meter p of the former interpreter as •' p to make the 
substitution appear more complete. 

There are several occurences of can. , : cdn , and 
'•coni in the prototype code; these are not to be 
changed. They exist because the interpreter builds 
structures , argument lists and environments , and 
searches them. The use of : CO ni> is required to 
build these structures, but the non-strict coni is 
only available through the interpreter at this time. 
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There is no choice but to use McCarthy's original 
functions for these purposes. In Theorem 3 we shall 
return to bootstrap the interpreter so that these 
occurrences of •' CO fti> are also non-strict. 

Because the first three results rest on program- 
correctness arguments (Manna and Pnueli 1970), we 
must define three relations which will describe the 
behavior of the two interpreters for the three kinds 
of data structures used: values, argument lists, 
and environments . 

Vt^tnttto n- The relation "< v " > read "coerces to 
value," is defined as follows: 

i) If (atom a) then a < v a ; 

ii) If (not (atom y ) ) and x < v y then both 

(car x) < v (:car y) and (cdr x) < v ( : cdr y) . 
Vtklnltlon ■ The relation "< " , read "coerces to 

3. 

arglist," is defined as follows: 

i) NIL < NIL ; 

cl 

ii) If r < s and x < y then 

v a 

(:cons r x) < a (:cons s y) . 
V&hinttion ■■ The relation "< e " > read "coerces to 
environment," is defined as follows: 

i) NIL < e NIL ; 

ii) If (atom a) , r <^ s , and x < g y then 

( : cons ( icons a r) x) < g (:cons ( : cons a s) y). 

It is fortunate for testing the above relations 
that the predicates, atom and •■atom, as well as £Q 
and '• iq , coincide. 

The first theorem says that whenever the -<iva.ll 
'•apply interpreter converges then the ZV all apply inte 
prefer converges to a related value from related inpu 

Tfeeo-tem J: If form < :form and env < :env 

v s 

then (eval form env) < v (:eval :form : env ) 

P-tOOfj: The program-correctness induction proceeds 
on six invariantly true predicates: 

1. If form < :form and env < :env then 
v e 

(eval form env) < (:eval :form :env) ; 
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2- If fn < v :fn and args < & :args and 

env < :env then (apply fn args env) < 

v 

( : apply : fn : arg : env) ; 

3. If fpl < : fpi and apl < :apl and 

env < :env then (pairlis fpl apl env) < 

/ . . e 

(:pairlis :fpl :apl :env) ; 

4. If (atom at) and env < : env then 

e 

(assoc at env) < v (:assoc at :env) ; 

5. If unargs < :unargs and env < : env then 

v e 
(evils unargs env) < g (:evlis :unargs :env) ; 

6. If tail < :tail and env < :env then 

v e 

(evcon tail env) < v (:evcon :tail :env) . 
Lemma: If x < v : x and y < g :y then 

(car x) < v (:car :x) ; (cdr x) < y ( : cdr :x) ; 
(scons x y) <^ (:scons :x :y) . 

The first two conclusions are trivial: vacuously 
when x is an atom and by definition of < v otherwise. 

In the last case (using &covi& from the appendix) 

(scons x y) E (icons ( : cons (car x) y) 

(:cons (car (cdr x)) y)) 

which is clearly not an atom. Moreover, 

(car (scons x y)) = (eval (car x) y) and 

(cdr (scons x y)) = (eval (car(cdr x)) y) . 
However , 

(:car (:scons :x :y)) = (reval ( : car :x) :y) and 

(:cdr (:scons :x :y)) = (:eval ( : car ( : cdr :x)):y 

Because (car x) < (:car :x) and (car(cdr x)) < 

V 

(:car(:cdr x)) by the first part of the lemma, and 
because of Invariant Predicate 1 the result is 
established. □ 

Results like this lemma are easily obtained for 
the other relations, and similar results on atom 
and eq are available because these predicates are 
identical in both interpreters. The proof of 
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Theorem 1 now degnerates into a line-by-line analysis 
of the recursive code. We shall only present 

the arguments on two lines : one from "eval" and one 
from "apply." 

Consider the CONS line in "eval." We want to 
show that if form < v : f orm and env < g : env and 

(not (:atom :form)) and (:atom ( : car :form)) and 
(:eq ( : car :form) CONS) then the following are all 
true : 

(not (atom form)); (atom (car form)); 
(eq (car form) CONS) ; 

(scons(cdr form)env) < v (: scons (: cdr : form ): env ). 

The proof is easy with the lemma. The first three 
fall from it and the definition of < v . They and 

the lemma applied twice give the last required 

result verifying Predicate 1 for this case. 

Finally, consider the CAR line in "apply." Assume 

that fn < : f n , args < :args , env < :env , 
v a e 

(:atom : f n ) , and (:eq : f n CAR) . From the defi- 
nition of < a we have ( : car args) < v ( : car :args) 

and thence by the lemma (car ( : car args)) < v 

(:car ( : car :args)) establishing this case for 
Predicate 2 . 

The remainder of the proof is tediously similar.! 

Jh.ton.zm I- McCarthy's evaluation scheme with our 
three elementary functions, nva.ll apply , can evaluate 
forms on which the unmodified evaluator, ■■<iva.ll 
••apply, diverges. 

VtLOOh'- The example which appeared above will suf- 
fice: (car (cdr (cdr (terms 1)))) which extracts the 
third term from an infinite sequence. I 

Next we postulate a system for tval/ apply boot- 
strapped upon itself so that the occurrences of 
•■aoni in the prototype interpreter in the appendix 
now create suspensions. We call this system the 
Hipzfii.ntlfLpn.ztzH. for reasons which will become 
apparent. In the resulting system there is only one 
breed of COM, the kind that suspends its arguments, 
and only one breed of can and cdn, the kind which 
coerce suspensions. 

The super interpreter is not hampered by two kinds 
of errors which normally cause a function to diverge 
in :Zval /-.apply . The first case arises from the COM 
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in Zvlth . When this COM is strict every actual 
parameter is evaluated; if it is an expression only 
involving strict operators, such as (quotient 1 0), 
then evaluation is complete and divergence implies 
that the form being evaluated diverges immediately 
(call-by-value). If, however, the COM in zv Ilk is 
the suspending kind, then argument evaluation is 
delayed until the result is accessed by the applica- 
tion of a strict elementary function to a formal 
parameter sometime later during the course of inter- 
pretation (call-by-name). All non-elementary func- 
tions are assumed to be strict in no parameters until 
then . 

Another error which can be avoided by the 
suspending COM (see palnllb ) is that of insufficient 
arguments. (PflU.-UU.-6 builds the environment, binding 
formal and actual parameters.) The only way in 
which this error will be caught is, again, as a 
result of a strict elementary function being applied 
directly or indirectly to the formal parameter which 
is unbound because of the error. 

Thzon&m 3: The super Interpreter is properly more 
powerful than the interpreters of Theorem 1. 

?nool- The equivalence of the interpreters when 
■ zv all -.apply or zvall apply converges is established 
through a proof much like that of Theorem 1, but 
simpler because with only one COM there is only one 
"coerces to" relation for all structures. The fol- 
lowing example converges under the s upe r in t erpr e t er 
by escaping the pitfalls of argument evaluation and 
parameter binding by postponing the construction of 
Its Internal data structures. Define the function 
A&cond as 

( second x y z ) = y . 

The form , 

(second (quotient 1 0) 3) 

evaluates to 3 in spite of the strictly divergent 
first argument and the mi s s In g . th ir d argument. I 

Examplz- As an example of a form whose evaluation 
diverges in LISP 1.0, even under the sup er in t erpr e - 
ter , we o f f er 

((label gardenpath 

(A (x) (cdr (cons x (gardenpath x) )) ) 
) NIL) . 

In the evaluation under the superinterpreter the 
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arguments to aoni are suspended, but the second sus- 
pension is continually coerced by application of the 
strict elementary function cdK. 

Rosen (1973) has established least fixed-point 
results for a nondeterministic version of LISP and 
Wand (1975) has established related results for 
Reynold's (1972) style interpreters. It is clear 
that our superinterpreter operates deterministically 
and that the evaluator never descends the evaluation 
tree any deeper than required by the strict elemen- 
tary functions within McCarthy's interpreter. As a 
result, it appears that the only weaknesses in 
Rosen's and Wand's proof can be avoided without 
changing the description of the interpreter in the 
appendix . * 

Strong CO nj ZCtufiC- The superinterpreter yields the 
least fixed-point semantics for McCarthy's s&vaZ/ 
•■apptij LISP 1.0 evaluator. 

Another approach to the conjecture may be based on 
the facts that the interpreter performs pure call-by- 
name (leftmost substitution rule) and that all elemen- 
tary functions are 'sequential' (Vuillemin 1974) as 
they are eventually coerced. In particular, an argu- 
ment to C0nt> is only coerced as if it were part of 
the form ( CO.K ( CO ni> . . . ) ) or ( cdK ( CO nt> . . . ) each of 
which is sequential; the other elementary functions 
are strict . 

Henderson and Morris (1976) have independently 
discovered a "lazy" evaluation scheme for LISP which 
is presented with lucid examples and Scott-Strachey 
semantics. Their scheme is no less powerful than 
ours because they also provide a non-strict C0n& . 
By the strong conjecture, then, their scheme is 
equivalent in power to ours . 

III. SUICIDAL SUSPENSIONS 

The scheme for implementing suspensions described in 
the previous section Is terribly Impractical for a 
running interpreter because a suspension is coerced 
again and again for every access to its value by a 
strict function. By Observation 1 a traversal of a 
data structure requires invocation of evaluation at 
every turn, and if the structure Is traversed a 
second time , then the evaluations will all be 
repeated, just to get the same result (because 
suspended environments do not change). 

*For another perspective, however, see deBakker 
(1975 ) . 
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With the predicate, impended, defined over all 
references within the system, as described In the 
previous section, we can modify the definition of 
can. and cdK to prevent any repeated coercions of the 
same suspension. After the evaluation of the first- 
coercion on a suspension the value is stored in 
place of the reference to the suspension. Future 
accesses which would have found and coerced the sus- 
pension are instead directed straight to the final 
value which is referenced in the same way, but is 
not suspended. 

In the last section we saw that changing the coni, 
used by the interpreter from strict to non-strict 
had the effect of changing all user functions from 
call-by- value to call -by-name . The introduction of 
the storing versions of can. and cdn, into the inter- 
preter has the effect of changing the call-by -name 
scheme into a call-by-delayed- value (Vuillemin 1974) 
scheme. Then no argument to any function will be 
evaluated until it is required by a strict elemen- 
tary function within the Interpreter, and after that 
it will never be evaluated a second time. 

Obi ZA.VO.t-Lo n I- There is at most one reference to 
every suspension in the system. 

That reference is in the node allocated by the 
function •com for which both invocations of 
Au.6pe.nd in the system are arguments. (We emphasize 
that the functions hon.m, &nv , iaip&nd, impended , 
'•can, '-cdn, and '-coni, are not available to the user, 
and that the interpreter only uses them to define 
the elementary functions CCLfl, cdfl , and CO ni . ) 
Moreover, the only time this reference is accessed 
after its creation is during the evaluation of can, 
or cdn. of that node. 

Let Hpta.cti.ba, be a function of two arguments 
defined similarly to Hptaca. of LISP l!5 (McCarthy 
1962). The first argument is a node allocated by 
•■coni: and the second is a value of some sort. 
Rptactiba performs four steps : 

--Notes the reference in the A- ^ietd of the node, 

N, which is the first argument; 
--Stores the reference to its second argument in 

the k- iietd of N; 
--Liberates (returns to available space) the 

single node whose reference was noted above; 
--Returns the value of the second argument as 

Its value. 
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Rplacllbd is defined similarly for the V-^l&ld. 
Rplacllba and fvptcic.Li.bd. are not available to the 
user. In our applications the liberated node will 
always be a suspension and the replaced value will 
always be a reference to an atom or to a node origi- 
nally allocated by •dOYih. 

Since coercions only occur within CClfl and cdK , it 
is those functions which we change in order to avoid 
repeating them. 

(car node) = (cond 

Lfa (suspended ( : car node)) then 

(rplacliba node (eval (form ( : car node)) 

(env ( : car node)))) 

eli> e ( : car node ) ) ; 

(cdr node) E (cond 

<tj$ (suspended ( : cdr node)) then. 

(rplaclibd node (eval (form ( : cdr node)) 

(env (:cdr node)))) 

dth & ( : cdr node ) ) . 

If the desired reference is to a suspension, it is 
coerced and the resulting reference is inserted in 
place of the original reference. The liberation is 
possible based on Observation 2 and the conditional 
test within each function. After replacement there 
is neither necessity nor ability to access the sus- 
pension. If the reference isn't to a suspension, 
then that replacement has already occurred and the 
value is directly accessible. 

lho.OflQ.rn 4- Theorems 1, 2, and 3, and the strong 
conjecture apply as well to the interpreter using 
the definition of ca.fi and edit of this section. 

The proof is a trivial program-correctness argument 
outlined informally above. I 

The.OfLe.rn S- Using the new functions cafe and cdK 
defined here, the number of calls to eval within the 
superinterpreter during the course of evaluating any 
form is less than or equal to the number of calls 
under McCarthy's : CV all : apply scheme. 

VfLOOi- Since the function CO ni is strict under 
McCarthy's scheme, evaluation of its arguments 
always precedes its application. The only evalua- 
tions which are suspended in our scheme are precise- 
ly those resulting from applications of CO n£ . The 
suspended arguments are eventually evaluated at most 
once, however. Since we accept his interpreter 
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(essentially) without change, the relation between 
the numbers of invocations of eval follows. I 

The interpreter which uses the new coni, with 
suicidal call and cdfL is remarkably efficient. A 
COni allocates three new nodes instead of just one 
as in : eval/ : apply , but avoids the (perhaps infinite) 
time required to evaluate its arguments. Environ- 
ments tend to get dragged around the system, 
preserved from garbage collection by suspended refer- 
ences, but argument evaluation is avoided until 
absolutely necessary and environment construction, 
itself, is suspended. On coercion of a suspension 
from within CCLH or cdfi the node carrying the suspen- 
sion is automatically released, and when all suspen- 
sions to a particular environment have been coerced, 
then that environment may finally be garbage col- 
lected.^ The only ultimate storage cost results from 
suspensions which are never coerced. That space is 
always balanced by the time saved in not evaluating 
forms to useless arguments as indicated by Theorem 
5. We have, therefore, modified the system by 
increasing linearly the time required for three of 
the elementary functions at the expense of space 
required to carry around potentially unneeded envi- 
ronments. However, that storage cost enables us to 
save time by reducing potentially exponential 
computation time, and even potentially divergent 
computation, back to practical limits. 

IV. IMPLICATIONS FOR FILE STRUCTURE 

In this ^section we consider the implications of 
suspensions on communication with external devices. 
The requirement that the environment of a conversa- 
tion be freezable as part of a suspension demands 
random access files in order to provide easy resto- 
ration of the device upon an unanticipated thaw. A 
useful model for the properties of sequential files 
may be found in Landin's concept of a stream (Landin 
1965; Burstall, Collins, and Popplestone 1971; 
Hewitt et al. 1974; Burge 1975). 

Landin describes a htfieam as a particular type of 
function which represents a sequence. A stream is 
applicable to an empty list of arguments and 
produces a pair whose first element is the next item 
in the sequence and whose second element is a stream 
for the remainder of the sequence. This definition 
provides for a potentially infinite sequence using 
only strict functions by depending on the user to 
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control the expansion of a stream through explicit 
application of the successively generated streams. 
If we assume that the application of a stream is 
implicit in referring to it , then a stream may be 
viewed as the result of a CO ni strict in its first 
argument. In that view Landin's observation (1965) that 
streams "enable us to postpone the evaluation of the 
expressions specifying the items of a list until 
they are actually needed" is true only if 
lists are always processed from left to right with- 
out skipping any entries. This knowledge is avail- 
able in some circumstances in particular sequential 
input/output which Landin was prepared to model. 

The only operations which need be defined for a 
stream are these: 5 ' 

(hs s) = the first element of s; 

(ts s) E the stream representing all but (hs s); 
(prefixs x s) = the stream whose first element 

is the value of x and whose 

remainder is s ; and 
(nulls s) = TRUE when the stream is empty, 
FALSE otherwise. 

Since streams cannot be arguments to any other ele- 
mentary function in the system, we can compare our 
system to the Landin system on the basis of these 
operations . 

Tke.OHe.rn 5- McCarthy's LISP 1.0 with our elementary 
functions can model Landin's streams. 

Yh.00^- For every occurrence of (hs s) substitute 
(car s); for (ts s) substitute ( cdr s); for (prefixs 
x s) substitute (cons x s); for (nulls s) substitute 
(same s NIL) in any program using Landin's streams. 
The semantics are the same because the strict 
elementary functions dCLK and cdn. coerce suspensions 
planted by COM in the same way that Landin's hi, and 
th apply the function, s, to get the next pair. I 

The.0?ie.m 6- McCarthy's LISP 1.0 with our elementary 
functions can model more than Landin's streams. 

VKOOh- The result obtains because (prefixs x s) 
evaluates its first parameter completely. The two 
systems would be equivalent if we had defined COYli 
to be strict in its first parameter. The example in 
Section II of the sequence of terms which sums to 



*In these definitions we have chosen the names 
from Burge (1975) rather than Landin (1965). 
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it 2 /6 offers a simple counterexample for Landin's 
streams. Consider the Boolean form 

(equal (car (cdr (terms 1))) 

(car (cdr (cdr (terms 0))))) . 

Our evaluation scheme returns the value TRUE because 
the two terms selected from the sequence are both 
1M. Had we defined te.Kmi> with Landin's function 
puti^xi as 

(terms n) E ( pr e f ixs ( r e cipr ocal ( s quare n)) 

(terms (addl n ) ) ) , 

then the form would diverge because of a division by 
zero. 1 

For the remaining discussion on streams the func- 
tion ptizfaxti is treated as C0H4 except that it is 
strict in its first parameter. This makes it parti- 
cularly useful for describing sequential files. Let 
the function^ fiend be defined as on many LISP sys- 
tems : ft tad is a function of zero parameters which 
removes the next form from the input file and returns 
it as value. Then the function Input could be 
defined to identify the entire file without 
necessarily reading it: 

(input) 5 (prefixs (read) (input)) . 

If one were then careful to access the input file in 
order, one could then refer to (car (Input)), the 
first form on input and (cdr (cdr (input))), the 
remainder of the file after the first two forms. The 
outer level interpreter "listening loop" for an 
interactive system might be written as one function, 
Output whose value is passed to the printer: 

(output s) = (prefixs (eval (car s) NIL) 

(output (cdr s ) ) ) . 

The monitor invocation of (output (input)) runs the 

interpreter and results In an appropriate output 
stream . 

Consider the function Input with com substituted 

for pftefalxh and a predicate indocile.: 

( input ' ) = ( cond 

■li (endoffile) then NIL 

e.U& (cons (read) (input')) ) . 

If we invoke the form (reverse (input')) our expec- 
tation would be that this invocation would reverse 
the forms taken from the input file. However, 
because Head is suspended until the results of 
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Kex) eH.b £ are accessed, and because H.ead is a side- 
effecting function, the eventual effect if the 
H,eveH.-ie is printed is to copy the input unchanged be- 
cause the first H.ead forced still gets the first form 
from input. Thus ( output ( revers e ( input '))) and (output 
(input 1 )) transfers the input file to the output file 
essentially unchanged, but ( output ( revers e ( input )) ) 
actually prints the reversal! The error is that the 
side-effects of H.ead cannot be carried in the envi- 
ronments within the suspensions. If the value of 
(input') is taken to be a random- acces s file (as if 
it were a data structure within the machine) then 
the result would be the expected one. 

We argue that Landin's streams fit the requirement 
of sequential files. (See the dynamic Hit of P0P2 
(Burstall, Collins and Popplestone 1971).) Because 
ptithixi, is strict in its first argument it is impos- 
sible to access the remainder of the sequence without 
noticing the existence of the first element. On the 
other hand, the non-strict coni lends itself to 
manipulation of random- access (tree structured) files 
as an extension of the rest of memory: one can move 
across the tree at a high level without being 
bothered with details at inferior levels. 

In an extremely lucid discussion of streams , 
Burge (1975) develops the notion of a stream- funct ion 
as a coroutine structure. With the suspension model 
of COM the same structure may be being traversed by 
several functions at once: when a suspension is 
coerced by one function, the value generated by the 
coersion is left behind in the place of the suspen- 
sion for others to find if they need it. One 
interesting effect of this interpretation is that 
coroutines are written without any conscious effort 
by the programmer. The parts of the structure which 
are actually evaluated, as opposed to those which 
remain suspended, and the order in which evaluation 
occurs are not easily predicted from outside the 
system . 

Our generalization of coni to non-strict is, 
therefore, a generalization of Landin's pH.e{lxt> in 
the same way that, as Landin demonstrated, pH.eiixi 
is a generalization of the strict --COM. The 
difference is that the structures built with the non- 
strict COM can have the evaluation of the expres- 
sions specifying any part of the overlapping tree 
structure postponed until they are needed. 
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V. FUNCTIONS WHICH SELECTIVELY EVALUATE ARGUMENTS 

The use of the non-strict COM within the interpreter 
in a way which suspends argument evaluation until the 
parameter is used by a strict elementary function 
enables certain special forms (McCarthy 1962) to be 
treated as functions. In order to define some of 
these ^ special forms, we allow a certain class of 
functions which take an arbitrary number of arguments. 
The definition of these functions will be flagged by 
exactly one formal parameter directly following A 
which will be bound to the list of (suspended) eval- 
uated arguments. For example, the function Hit can 
be defined as the function (A x x) so that if forced 
it evaluates to the list of its (arbitrary number of) 
evaluated arguments. In order to facilitate writing 
recursions on lists of arguments we use a notation 
for applying a function to a list of arguments. The 
notation <f x> calls for an application of the func- 
tion, f, to the list of evaluated arguments which 
result from the evaluation of x. Thus, (f a b c) is 
synonomous with <f (list a b c)>, and in LISP 1.5 
(McCarthy 1962, Appendix B), <f x> means 
(apply (function f) x NIL). 

The logical connectives, and and OH., are defined 
in LISP to take an arbitrary number of arguments and 
to evaluate them from left to right. The first argu- 
ment which evalutes FALSE (respectively, TRUE) for 
the special form and ( OH. ) terminates evaluation 
returning that value; If the argument list is 
exhausted then the value which results is TRUE 
( FALSE ). The explicit order of evaluation requires 
care in a system implemented with strict elementary 
functions, because these special forms are not strict 
In any parameter after the first argument which eval- 
uates to FALSE ( TRUE ). However, in the system 
which uses the non-strict COM internally, evaluation 
Is automatically suspended so that and ( OH. ) becomes 
a function yet its strictness property remains the 
s ame . 

and = (A x (cond 

i-i (same x NIL) then TRUE 

etieli (car x) then <and (cdr x)> 

e£« FALSE)) ; 
or = (A x (cond 

i& (same x NIL) then FALSE 

elicits (car x) then (car x) 

elie <or (cdr x)> )) . 
The superinterpreter gives the correct results 
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with these definitions because the coni, within evt-Li 
suspends evaluations. The pattern of the recursion 
with (cdr x) in and ( OA. ) would allow this program 
to work even if evtti were implemented with pfie&txi 
in place of COni> , because that cd.fi coerces a 
suspended evtti only when the value of the ca.fl is 
needed . 

The function, then- tli £ , requires the coni 

rather than the pfie^txi within tvt-L& because it does 
not necessarily access its arguments in order. 
Again, we treat then- eti e as a function, rather 

than as a special form. 

( if-then-else p q r) 5 (cond 
p then q 
cli e r ) . 

By generalizing L^-then-elhe we can write 

conditional = (X x (cond 

i-i (same x NIL) then NIL 

eliet^ (same (cdr x) NIL) then (car x) 
eliet{j (car x) then (car (cdr x)) 
etitC <conditional (cdr (cdr x))> )) . 

This condtttonat does not use the cond-pai.fi}> of 
McCarthy's interpreter. Moreover, we could not write 
conditional as a function If it did. Instead, forms 
in odd-numbered argument positions (except the last) 
are treated as predicates , and the forms in the 
respectively following (even-numbered) positions are 
taken as the associated values. With this simpli- 
fication, the program is free from superfluous 
bracketings and the evaluator prepares for condition- 
al evaluation (which Is suspended) by a normal invo- 
cation on evliis . Only the odd-numbered arguments 
are actually evaluated until a non-NIL value is found. 



CONCLUSIONS 

The result of any mechanical evaluation scheme Is 
usually passed as a final structure to some print 
routine which traverses it displaying the elementary 
parts as part of a picture of the answer. We have 
proposed an evaluation scheme in which the structure 
building function (constructor) is non-strict so that 
evaluation of its arguments is delayed until they are 
needed by the strict elementary functions. Therefore, 
the first evaluation of suspended arguments might be 
delayed until the traversal procedure within the 
print routine. If the only ultimate use of a result 
is to display it, then the only computations 
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necessary are those which directly contribute to the 
value displayed. We have proposed a very simple 
scheme for accomplishing this behavior in a nicely 
structured Interpreter (LISP 1.0) simply by parti- 
tioning the five elementary functions into the strict 
and the non-strict. 

We have implemented the elementary functions and 
the interpreter described in Section III, boot- 
strapping on an existing LISP implementation*. The 
appendix reflects an interpreter for our version of 
LISP; it appears very similar to McCarthy's. Signi- 
ficant differences in the behavior of the interpreter 
arise because the uses of C0nt> by the interpreter 
also cause suspensions. The use in evlii suspends 
argument evaluation; the use in paifllli, suspends 
environment construction; the uses in apply, cafilii , 
and cdftlli, suspend construction of the multiple- 
valued structures which result from our operation of 
functional combination discussed elsewhere (Friedman 
and Wise 1976a, 1976b). All the resulting suspen- 
sions are coerced whenever they occur as arguments 
to the strict elementary functions. If McCarthy's 
evaluator is taken intact and interpreted with our 
elementary functions , the evaluation scheme becomes 
properly more powerful. We strongly conjecture that, 
in fact, this Interpretation yields the least fixed- 
point semantics for his evaluator. 

In a previous paper (Friedman and Wise 1975) we 
propose the compilation of recursive programs into 
iterative machine code. The source code was to be 
restricted to a "stylized" language in order to 
assure the mechanical translation. That paper con- 
centrated on the peculiar role of coni in a recur- 
sive program, which may be reinterpreted in light of 
the discussion herein. The result of a function 
which recursively builds a list using coni , when run 
under the interpreter which we propose here, develops 
its answer in a top-down order as the suspensions are 
coerced in the traversal within pfiint. The normal 

*It is noteworthy that the popular technique of 
implementing con t e xt - swit ch ing with "shallow bindings" 
and a push-down-list does not allow environments to 
be saved within suspensions, because suspensions are 
passed from nested environments out to enclosing 
environments. See Moses (1970) and Sandewall (1971) 
for further discussion of the problems with shallow 
binding schemes involving the role of function in 
LISP . 
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recursion (McCarthy's) builds the result bottom-up. 
The goal of iterative code is closer with the natural 
transformation of bottom-up to top-down code readily 
available from our understanding of the role of 
s usp ens i ons . 
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APPENDIX 



The appendix is in two sections. The first is a 
summary of the definitions of LISP's elementary 
functions as set forth in Sections II and III. 
Functions preceded by a colon ( : ) refer to 
McCarthy's five elementary functions. The second 
section is a prototype interpreter referenced in 
Sections II and V. 



Eltmtnta/iy fanctlo ni> ion. Station 11 pn.oofa 

For the •* eval/ apply interpreter: 

( : s cons : ab : env ) = 

( : cons ( : e val ( : car 
( : eval ( : car ( 
( :car :x) = ( : car :x) ; 
( : cdr : x ) = ( : cdr : x) ; 
( : eq . : x :y ) = ( :eq : x : y ) ; 
( :atom :x) = ( :atom :x) . 

the tv all apply interpreter: 



:ab ) 
: cdr 



: env ) 

ab ) ) : env ) 



For 



(scons ab env) = 

( icons ( icons (car ab ) env) 
(icons (car(cdr ab ) ) 
(car x) s (eval (:car(:car x)) 
( : cdr ( : car x ) ) 
(cdr x) = (eval (:car(:cdr x)) 
( : cdr ( : cdr x ) ) 
x y ) ; 



(eq x 
( atom 



y) = 

x) = 



env ) 

); 
) ; 



); 



eq 
atom x) 



Ele.me.ntoL/Ly fanttlonh 
InttK-p/ttteh. 



ion. Section III '4 practical 



(scons ab 
( : cons 



env ) = 
( suspend 
(suspend 
(car x) = (cond 
li (suspended ( 
(rplacliba x 



( car ab ) 
( car ( cdr 



env ) 
ab)) 



env ) ) 



car x)) thtn 

(eval (form(:car x)) 

(env( : car x) ) ) ) 



tlt> & ( : car x ) 
(cdr x) = (cond 
li (suspended 
(rplaclibd : 

tli> e. ( : cdr x ) 
(eq x y ) = ( :eq x 
(atom x) = ( :atom 



); 



( : cdr x ) ) then 
x (eval (form(:cdr x)) 

( env ( : cdr x ) ) ) ) 

) ; 
y); 

x). 
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Prototype lnten.pn.tttn. fallowing McCarthy ' i, {1 962} 

The following interpreter serves two purposes in the 
paper. The proofs in Section II refer to the 
unbracketed lines with appropriate substitutions 
made for the uncoloned occurrences of the elementary 
functions. The bracketed lines provide for formal 
parameter structures suggested in Section V and for 
functional combination (Friedman and Wise 1976a, 
1976b ) . 

The function hamt, defined by 

(same sexp atm) = (cond 

Ifa (atom sexp) then (eq sexp atm) 

tltst nil) , 

is assumed to avoid misinterpretation due to undefined 
values of eq in apply. 

The pKOtotypt lnttA.pn.tttn. [Bracketed lines are ignored 
in Section II.] 

(eval form env) E (cond 

li (atom form) then (assoc form env) 
tlistli (atom (car form)) thtn (cond 

li (eq (car form) QUOTE) then (car(cdr form)) 
tlhtli (eq (car form) CONS) then 

(scons (cdr form) env) 
tlhtli (eq (car form) COND) then 

(evcon (cdr form) env) 
el6 e. (apply (car form) (evlis (cdr form) 
env ) en v ) ) 

el&e (apply (car form)(evlis (cdr form) env) 
env ) ) 

(apply fn args env) = (cond 
l£ (atom f n ) thtn (cond 

li (eq fn CAR) then (car(:car args)) 

e.l& el{j (eq fn CDR) then (cdr(:car args)) 

tl&eli (eq fn EQ) thtn 

(eq (:car ar gs ) ( : car ( : cdr args))) 
tl&tli (eq fn ATOM) thtn (atom (:car args)) 
tlitll (eq fn NIL) thtn NIL 
tli t (apply (eval fn env) args env) ) 
tliitlh (same (car f n ) LAMBDA) thtn, 
(eval (car(cdr(cdr f n ) ) ) 

(pairlis (car(cdr f n ) ) args env)) 
tli,tl{) (same (car f n ) LABEL) thtn 
(apply (car(cdr(cdr f n ) ) ) args 
(icons ( icons (car(cdr f n ) ) 

(car(cdr(cdr f n ) ) ) ) env)) 
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Ltl&tli (anynull args ) thtn NIL ] 

[eiie (cons (apply (car f n ) (carlis args) env) 

(apply (cdr f n ) (cdrlis args) env))]) 

(pairlis fpl apl env) 5 (cond 
i-i (atom fpl) thtn env 

tlit (:cons (:cons (car fpl)(:car apl)) 

(pairlis (cdr fpl)(:cdr apl) env)) ) 

[(pairlis fpl apl env) s (cond 
-tj) (atom fpl) thtn (cond 

-Cj$ (eq fpl NIL) thtn env 
tli t (.icons (:cons fpl apl) env)) 
ttt> t (pairlis (car fpl)(:car apl) 

(pairlis (cdr fpl)(:cdr apl) env)))] 

(assoc at env) = (cond 

(eq (:car(:car env)) at) thtn (:cdr(:car env)) 
tlt> t (assoc at ( : cdr env)) ) 

(evlis unargs env) = (cond 
l{ (atom unargs) thtn NIL 
ttit (:cons (eval (car unargs) env) 

(evlis (cdr unargs) env)) ) 

(evcon tail env) = (cond 
li (atom tail) thtn NIL 
tlhtii (atom (cdr tail)) thtn 

(eval (car tail) env) 
ttitli (eval (car tail) env) thtn. 

(eval (car(cdr tail))env) 
tlit (evcon (cdr(cdr tail))env) ) 

[(anynull lis) = (cond 

li (atom lis) thtn FALSE 

tlitli (same (:car lis) NIL) thtn TRUE 
tlit (anynull (:cdr lis)) ) ] 

[(carlis mtx) = (cond 

Xfj (atom mtx) thtn NIL 
tlit (cons (car(:car mtx)) 

(carlis (:cdr mtx))) ) ] 

[(cdrlis mtx) = (cond 

(atom mtx) thtn NIL 
tlit (cons (cdr(:car mtx)) 

(cdrlis (:cdr mtx))) ) ] 



J. Gill 
I. Simon 



INK, DIRTY-TAPE TURING MACHINES , AND QUASICOMPLEXITY MEASURES 

Ink, the number of times a Turing machine writes on its work- 
tapes, is known not to be a Blum complexity measure for Turing 
machines with two or more worktapes . We introduce a more gen- 
eral computation model, the dirty-tape Turing machine, for 
which no assumption is made about the initial contents of the 
worktapes. We prove that for one-tape Turing machines, clean 
or dirty, ink is a complexity measure. For dirty-tape Turing 
machines with two or more worktapes, ink is not a complexity 
measure, but is an example of a quasicomplexity measure. 
Quasicomplexity measures, which properly include Blum measures, 
are shown to satisfy several properties of complexity theory, 
such as the speedup, compression, and gap theorems. 

1 . INTRODUCTION 

One plausible measure of the cost of a Turing machine computa- 
tion is the number of times the machine writes on its worktapes. 
A machine is said to write on a worktape square only when it 
changes the contents of that square. We define the cost in 
ink of a halting computation to be the number of times during 
the computation that worktape squares are written on; by the 
usual convention, the ink cost of a nonhalting computation is 
defined to be infinite. 

It is well known, however, that ink is not a Blum complexity 
measure for Turing machines with two or more worktapes, because 

This research was supported by the National Science Foundation 
under Grant GK-43121 and by the Fundacao de Amparo a Pesquisa 
do Estado de Sao Paulo under Grant 72/425. 
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PREFACE 



This Third Colloquium on Automata, Languages and Programming 
takes place at a time when the technology for constructing 
information-processing systems has raced far ahead of our 
ability to theorise about the devices that we can, and do, 
construct. The need for theories adequate to guide the design 
and use of such systems grows more pressing every day. It is 
some comfort that the papers offered to the Programme Committee 
showed that the amount of good research in the Theory of 
Computation has increased since the last Colloquium, but every 
advance in technology raises more new questions than the 
theoretical advances have yet answered, and we look forward to 
future Programme Committees being overwhelmed by a flood of 
worthwhile papers. 

S .Michaelson 



